Delete aws secretsmanager secrets by name prefix (ansible, bash)

foo.yml

- set_fact:
    prefix: foo/bar

- name: delete aws secretsmanager secrets by name prefix
  shell: |
    set -eo pipefail
    shopt -s inherit_errexit 2>/dev/null || true
    declare -a opt page_secrets secrets
    while [[ "$next_token" != null ]]; do
      read -ra opt <<<"${next_token:+--next-token "$next_token"}"
      page="$(aws secretsmanager list-secrets \
        --query '[SecretList[?starts_with(Name, `{{ prefix|quote }}`)].Name,NextToken]' \
        "${opt[@]}")"
      read -ra page_secrets <<<"$(jq -r '.[0]|join("\t")' <<<"$page")"
      secrets+=("${page_secrets[@]}")
      next_token="$(jq -r '.[1]' <<<"$page")"
      sleep 1
    done
    for secret in "${secrets[@]}"; do
      aws secretsmanager delete-secret --secret-id "$secret" --recovery-window-in-days 7
    done
  args:
    executable: bash
  register: foo
  changed_when: '"DeletionDate" in foo.stdout'

Yeah, it's pretty terrible ;]
Requires bash and jq.
Use at your own risk.

ansible/ansible#40093